From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <guix-devel-bounces+larch=yhetil.org@gnu.org>
Received: from mp0.migadu.com ([2001:41d0:303:e16b::])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	by ms8.migadu.com with LMTPS
	id wMfKDMWJt2XdLAEAqHPOHw:P1
	(envelope-from <guix-devel-bounces+larch=yhetil.org@gnu.org>)
	for <larch@yhetil.org>; Mon, 29 Jan 2024 12:19:33 +0100
Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	by mp0.migadu.com with LMTPS
	id wMfKDMWJt2XdLAEAqHPOHw
	(envelope-from <guix-devel-bounces+larch=yhetil.org@gnu.org>)
	for <larch@yhetil.org>; Mon, 29 Jan 2024 12:19:33 +0100
X-Envelope-To: larch@yhetil.org
Authentication-Results: aspmx1.migadu.com;
	dkim=pass header.d=wolfsden.cz header.s=mail header.b=I9OqRNjx;
	dkim=pass header.d=wolfsden.cz header.s=mail header.b=egvnCBWB;
	spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org";
	dmarc=pass (policy=none) header.from=wolfsden.cz
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org;
	s=key1; t=1706527173;
	h=from:from:sender:sender:reply-to:subject:subject:date:date:
	 message-id:message-id:to:to:cc:cc:mime-version:mime-version:
	 content-type:content-type:in-reply-to:in-reply-to:
	 references:references:list-id:list-help:list-unsubscribe:
	 list-subscribe:list-post:dkim-signature;
	bh=rgfJ/Pr46OXUqGt2pY5tCHPxnOrDbdzl0VU84hMTuOM=;
	b=ltnk/2l4UimK/zu4NGnraOvQHP4Ogj1RKLdD1uxA2NiAi3maHtDfO+P8ZEgUjwwW2cfVeJ
	Enk2uqekZEJW9sKF66/Yhsb6n68fJCWRMQUwVWDAb1PBNGO5bvT94+QXK9/GkAVuVJ9/0i
	X8g5zVcvv6J5IxtkSgTJtg27orz8oh/JciyT9F8FBaEmpDVkMerSrbX4LRtxjk2tUoP4Vs
	ETGj2194AmFlEzB9TzSp8CWR/UBtIugBHrU10Spw7eth58xqd48Lt8ZGsMRwuHO6ZcoCYC
	3eA7qgQP3qAaXFByUStkWEsml6Hq+Zhx8IlHSeUo07NcUPrdE3oUL+TXyFa5RQ==
ARC-Authentication-Results: i=1;
	aspmx1.migadu.com;
	dkim=pass header.d=wolfsden.cz header.s=mail header.b=I9OqRNjx;
	dkim=pass header.d=wolfsden.cz header.s=mail header.b=egvnCBWB;
	spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org";
	dmarc=pass (policy=none) header.from=wolfsden.cz
ARC-Seal: i=1; s=key1; d=yhetil.org; t=1706527173; a=rsa-sha256; cv=none;
	b=RRFLk5tMh3zbPMHP+YmGjBkh8imQcCDQAQi9B5+/52hbd6YgkqoebIksRNNqaySMNi5QGD
	Z293xUpfXLhh9bNYpmW6lNkcFC6Gowm7nNuSSgxDjhrUYvo+PjKkdSp86RexjdzmTTMpFc
	vFVIUUs4C6B34WwAXDokdSsAP+vvTVyynLtCRWXsTArQZ2262Jhe+gzQ58MYsxivCCVJUn
	pp4abUt+v8v0SIoPqtcBw0Fh62VA7O9IgKIxdzROup/0GoruSyPD/uUk6kgksRDBRqTjp2
	P7sQB4Ytz7gNSSwSSvYG39Bej/Gf0xeyJAdogl72XL+F9hoquT9he52CXuE/jA==
Received: from lists.gnu.org (lists.gnu.org [209.51.188.17])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by aspmx1.migadu.com (Postfix) with ESMTPS id B575841E4A
	for <larch@yhetil.org>; Mon, 29 Jan 2024 12:19:32 +0100 (CET)
Received: from localhost ([::1] helo=lists1p.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.90_1)
	(envelope-from <guix-devel-bounces@gnu.org>)
	id 1rUPf5-0002Ol-Lz; Mon, 29 Jan 2024 06:18:47 -0500
Received: from eggs.gnu.org ([2001:470:142:3::10])
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1rUPf3-0002OF-Uu
 for guix-devel@gnu.org; Mon, 29 Jan 2024 06:18:45 -0500
Received: from wolfsden.cz ([37.205.8.62])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1rUPf1-0006j9-Nc
 for guix-devel@gnu.org; Mon, 29 Jan 2024 06:18:45 -0500
Received: by wolfsden.cz (Postfix, from userid 104)
 id 659F7283414; Mon, 29 Jan 2024 11:18:36 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1706527116; bh=Onco3t3Okt62e91d8hpj98Wd8Q8VGeh8MU4Q4GVfUcE=;
 h=Date:From:To:Cc:Subject:References:In-Reply-To;
 b=I9OqRNjx74keW+5LJqe+C1Hq9IIuLh5dOGHbY3/ks+LsM0IMAgFgH7hwHR7OjjArf
 BX+/Dvs7KPEfY4tr7IvmW9XDnkcDS8874zns+kr/XrJi+lznSkic3xQNCWglAJnF2e
 XTF+U8Eg1kalZhVzAshCkSpOz2/aMUmz1Xxxu/Rlhx4cbZitl9qk+gOWpTXawc8gur
 RyqGCHYO8i36DKODhld2fpLK87eyXbhuofppvPzBiCWwnbzJMz4D4wNFbVRI206STb
 8jPZK9GgZdOfH8MIG6QT4f3hryJ+Piui7HoKDxpGcBls+TxcpF3lIQiBWjC3Z1eHDY
 Ufa6oVh+ZgC8Ymt6LsrzH2pfjWlwVJgQHVipmXpL0LQi93VF1qqM5j4GGKDV/k1QE+
 uM3Wv2+Gl/W2mVrn3iXGrt/fm9q2av5tEiDoImUpazD8bkgLUdTYURUFJQG8Lcn5VY
 lkZJmjVUZ3qnRfceofulKU5bXlOcQvZfkCnoy66Re1kTAI3guWwsFmszgn+ZPzKN9J
 Vyxx8lFv00rAvOemANbkwMlUtc8Ujch+xipSK5daWd2bdMEByhLsSxoeHc99g0gLLN
 9i/tQmk3t4L5zlg/rmlb39liy+QG72DocaVf3yfiPBr1yF5hyFFNa7sxezcQT4vP0O
 WCMzLRPAZyD7HjjgikClKWBA=
Received: from localhost (unknown [193.32.127.154])
 by wolfsden.cz (Postfix) with ESMTPSA id 250E4281D7B;
 Mon, 29 Jan 2024 11:18:35 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail;
 t=1706527115; bh=Onco3t3Okt62e91d8hpj98Wd8Q8VGeh8MU4Q4GVfUcE=;
 h=Date:From:To:Cc:Subject:References:In-Reply-To;
 b=egvnCBWBhUTWo24ctVOVAtWiyC1rPWVZWqrKKALarb3qlpX+E5qzLRNZMhwEkFnv5
 dxr8wzGqfQzMj/d25O8ou5/uZf+NvjsvPdJdmxpjQr1HmZrkxLjdiUEr5sZ8XUKhPC
 sPTiWcanyGLjH87cwrIg3RX4FxuL2Fmq3Wmbc5q8o/k9nTNj4VnZBKrDLnn4ybvnnB
 jqJ8N5It8l6HpNQY2afajbe9gS2TbqFdTLkVr+5yvwm1y0Uu/7ZvTM8/eIN95H5fHb
 7iX/PTmKSUdc7w08kzG4uXqAjRsV8pm1ASmnBLLfW9OrIN2BNDGLIIgixKQnGr0wTl
 VryN6sAA5EOl0dSkq3stnsef6d6BMviXzjfuU+iVv5tcys9iZzmdAJL2ovjjo/m3lu
 x6niRWP61CrkxkVWZ2lnR+rqsnqsDo3nSK8cU70LczOHjRs45t0s4l93ArO+tRP9bz
 Dgo2uxd2O08t/PMXGW9JugHPzoudVN92ITNicLlWwyB6K1Qcr6yXTRyldi8N6M8z20
 blOqiKOn4L14R4ASnAaCMpbKZ8Yn4zfduFnfLsjKsQcWJrOLFpARRCZI8JU0Ei15uw
 ZRSsAJk6HL5jAKK6KKOVO5kBUgiU0/wbBZpx+8htKUhRrQeHJcWbETol6f+uIrJkZ8
 dpN5l7eijEYLlDZrnuHEF3vk=
Date: Mon, 29 Jan 2024 12:18:34 +0100
From: Tomas Volf <~@wolfsden.cz>
To: Konrad Hinsen <konrad.hinsen@fastmail.net>
Cc: Guix Devel <guix-devel@gnu.org>
Subject: Re: Symlinks in "guix pack" and "guix shell"
Message-ID: <ZbeJiqAlqGJTbxu3@ws>
Mail-Followup-To: Konrad Hinsen <konrad.hinsen@fastmail.net>,
 Guix Devel <guix-devel@gnu.org>
References: <m1o7d41o7m.fsf@fastmail.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature"; boundary="74528M38qF9+NO1g"
Content-Disposition: inline
In-Reply-To: <m1o7d41o7m.fsf@fastmail.net>
Received-SPF: pass client-ip=37.205.8.62; envelope-from=~@wolfsden.cz;
 helo=wolfsden.cz
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-BeenThere: guix-devel@gnu.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Development of GNU Guix and the GNU System distribution."
 <guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
 <mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/guix-devel>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
 <mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org
Sender: guix-devel-bounces+larch=yhetil.org@gnu.org
X-Migadu-Flow: FLOW_IN
X-Migadu-Country: US
X-Migadu-Spam-Score: -11.86
X-Migadu-Scanner: mx13.migadu.com
X-Spam-Score: -11.86
X-Migadu-Queue-Id: B575841E4A
X-TUID: TX9z7xTkTfw1


--74528M38qF9+NO1g
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2024-01-29 10:30:21 +0100, Konrad Hinsen wrote:
> Dear Guix experts,
>
> I am seeing inconsistent behavior with the creation of symbolic links
> in containers and exports, and I wonder whether this is a bug or missing
> documentation.
>
> According to the documentation, there are no constraints on what I can
> link to. In practice, some symbolic link requests have no effect, but
> there is no error message either.

That is interesting, at least in the guix shell case, I do get an error:

    $ guix shell -S /etc/ssl=3Detc/ssl -C bash coreutils -- ls -l /etc
    Backtrace:
    In guix/ui.scm:
      2287:10 19 (run-guix-command _ . _)
    In ice-9/boot-9.scm:
      1752:10 18 (with-exception-handler _ _ #:unwind? _ # _)
    In guix/store.scm:
        674:3 17 (guix-environment* _)
    In ice-9/boot-9.scm:
      1752:10 16 (with-exception-handler _ _ #:unwind? _ # _)
    In guix/store.scm:
       661:37 15 (thunk)
       1300:8 14 (call-with-build-handler _ _)
       1300:8 13 (call-with-build-handler #<procedure 7f3c6eb4e6f0 at g=E2=
=80=A6> =E2=80=A6)
    In guix/status.scm:
        839:4 12 (call-with-status-report _ _)
    In guix/scripts/environment.scm:
      1162:11 11 (_)
    In guix/store.scm:
      2180:25 10 (run-with-store #<store-connection 256.99 7f3c6dc21d70> =
=E2=80=A6)
    In guix/scripts/environment.scm:
        873:8  9 (_ _)
    In gnu/build/linux-container.scm:
       397:16  8 (call-with-container (#<<file-system> device: "none=E2=80=
=A6> =E2=80=A6) =E2=80=A6)
       265:16  7 (run-container _ _ (cgroup mnt pid ipc uts user net) _ # =
=E2=80=A6)
    In guix/scripts/environment.scm:
       903:14  6 (_)
    In srfi/srfi-1.scm:
        634:9  5 (for-each #<procedure 7f3c7f64ecc0 at guix/scripts/env=E2=
=80=A6> =E2=80=A6)
    In ice-9/boot-9.scm:
      1747:15  4 (with-exception-handler #<procedure 7f3c6afeca80 at ic=E2=
=80=A6> =E2=80=A6)
      1747:15  3 (with-exception-handler #<procedure 7f3c6afeca20 at ic=E2=
=80=A6> =E2=80=A6)
    In gnu/build/install.scm:
       108:23  2 (_)
    In ice-9/boot-9.scm:
      1685:16  1 (raise-exception _ #:continuable? _)
      1685:16  0 (raise-exception _ #:continuable? _)

    ice-9/boot-9.scm:1685:16: In procedure raise-exception:
    symlink `.//etc/ssl' points to nonexistent file `/gnu/store/kxvplpa4c0x=
f5pap6br8abip2bq9f0p8-profile/etc/ssl'

>
> Example: I am trying to tell programs in a container to use the
> certificates from package nss-certs, instead of requiring the user
> to share /etc/ssl from the host machine. So I add
>
>    -S /etc/ssl=3Detc/ssl
>
> to my command lines for "guix shell -C" and "guix pack" (for creating
> Docker or Singularity images.
>
> Sometimes this works, sometimes it doesn't. With "guix shell", I never
> got it to work. With "guix pack", the observed behavior is random.
> Adding a completely unrelated package to my container can make the
> difference.

I think the relevant part is whether some certificate package is installed =
(via
propagated inputs) or not.  If I explicitly add nss-certs to the command ab=
ove,
it starts to work:

    $ guix shell -S /etc/ssl=3Detc/ssl -C bash coreutils nss-certs -- ls -l=
 /etc
    total 12
    -rw-r--r-- 1 wolf users 32 Jan 29 11:14 group
    -rw------- 1 wolf users 20 Jan 29 11:14 hosts
    -rw-r--r-- 1 wolf users 92 Jan 29 11:14 passwd
    lrwxrwxrwx 1 wolf users 59 Jan 29 11:14 ssl -> /gnu/store/s0mdc10pkb9kc=
mnzjfywax1d42rm4car-profile/etc/ssl

Could you please share some examples where you get no error, but it has no
effect?  Maybe they really are bugs (and should be reported).

Have a nice day,
Tomas Volf

--
There are only two hard things in Computer Science:
cache invalidation, naming things and off-by-one errors.

--74528M38qF9+NO1g
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=VTDr
-----END PGP SIGNATURE-----

--74528M38qF9+NO1g--